Privacy Policy

Last updated: July 21, 2026

This document has been filled in with Drafeo's actual current details, but it is still a template, not a substitute for legal review. If you have users in the EU/UK (GDPR) or California (CCPA), have a lawyer confirm Section 6 and Section 9 meet those specific requirements — generic language isn't enough on its own for full compliance.

1. What this covers

This Privacy Policy explains what information Drafeo ("we," "us," "our") collects, how we use it, and who we share it with, when you use our website and Service. Drafeo is operated by Roussel Lamothe, an individual based in Florida, USA.

2. Information we collect

  • Account information: your email address, via Supabase Auth.
  • Content you submit: drafts you paste into the Service are sent to our AI processing providers to generate scoring and rewriting results. We do not store this content in our own database (see Section 5, Data Retention).
  • Usage data: how many rewrites you've used, your plan tier, timestamps of activity.
  • Payment information: handled entirely by Creem.io — we receive confirmation of your subscription status, not your card details.

3. How we use your information

  • To provide the Service — including sending your submitted content to third-party AI providers for processing
  • To manage your account, subscription, and usage limits
  • To communicate with you about your account (e.g. sign-in links, billing notices)
  • To improve and maintain the Service

We do not sell your personal information or your submitted content to third parties. We do not use your submitted content to train our own AI models.

4. Who we share information with

Drafeo relies on the following third-party services to operate, each of which processes some of your data as part of delivering the Service:

  • Anthropic (Claude API): receives submitted draft text to generate rewrites and analysis. Privacy policy
  • GPTZero: (if configured) receives submitted draft text to generate AI-detection scores. Privacy policy
  • Supabase: stores your account and profile data, and handles authentication. Privacy policy
  • Creem.io: processes payments and subscription billing as the merchant of record. Privacy policy
  • Resend: delivers transactional emails (e.g. sign-in links). Privacy policy

5. Data retention

We retain account and usage data (email, plan, usage counts) for as long as your account is active. Submitted draft content is not stored in Drafeo's own database at all — it's sent to our AI processing providers (Claude, GPTZero) to generate a response, and discarded on our end immediately once that response is returned to you. This describes our own systems specifically; each third-party provider has its own retention policy for data that passes through their systems (see their privacy policies linked in Section 4).

6. Your rights

This section needs jurisdiction-specific language if you have EU/UK or California users — GDPR and CCPA have distinct, specific requirements a generic clause like the one below doesn't fully satisfy. Have a lawyer review this before relying on it for those users specifically.

Depending on where you live, you may have rights to access, correct, delete, or export your personal information. To exercise these rights, contact us at support@drafeo.com.

7. Security

We use industry-standard measures to protect your information, including encrypted connections and access controls on our database. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

8. Children's privacy

The Service is not directed at children under 18, and we don't knowingly collect information from them. If you believe a child has provided us information, contact us at support@drafeo.com and we'll delete it.

9. International data transfers

If you have EU/UK users, this section needs specifics about transfer mechanisms (e.g. Standard Contractual Clauses) — check each provider's own documentation linked in Section 4, and have a lawyer confirm this is sufficient before relying on it.

Our service providers may process data in countries other than your own, including the United States.

10. Changes to this policy

We may update this Privacy Policy from time to time. We'll post the updated version here with a new "Last updated" date.

11. Contact

Questions about this policy or your data? Reach us at support@drafeo.com.